CVE-2026-20778

Awaiting Analysis Awaiting Analysis - Queue

Out-of-Bounds Read in Intel PROSet/Wireless WiFi Software

Publication date: 2026-08-11

Last updated on: 2026-08-12

Assigner: Intel Corporation

Description

Out-of-bounds read for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (high) impacts.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-11

Last Modified

2026-08-12

Generated

2026-09-01

AI Q&A

2026-08-12

EPSS Evaluated

2026-08-30

NVD

CVE-2026-20778

EUVD

EUVD-2026-56496

Affected Vendors & Products

Vendor	Product	Version / Range
intel	proset_wireless_wifi_software	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-125	The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This is an out-of-bounds read vulnerability in Intel PROSet/Wireless WiFi Software for Windows. It allows an unauthenticated attacker with adjacent network access to cause a denial of service by exploiting high complexity conditions. The attack requires no special internal knowledge or user interaction.

Detection Guidance

This vulnerability is an out-of-bounds read in Intel PROSet/Wireless WiFi Software affecting Windows systems. Detection requires checking for specific Intel WiFi driver versions and monitoring for kernel-level denial of service events. No direct commands are provided in the context, but you should verify installed Intel WiFi driver versions and monitor system logs for kernel crashes or unexpected wireless adapter failures.

Impact Analysis

The vulnerability may lead to system crashes or instability, resulting in denial of service. It does not directly compromise confidentiality or integrity but can severely disrupt availability of the affected system.

Compliance Impact

This vulnerability primarily causes a denial of service due to an out-of-bounds read in Intel PROSet/Wireless WiFi Software. It does not directly impact data confidentiality or integrity, which are key concerns for GDPR and HIPAA compliance. However, the resulting system unavailability could disrupt services handling sensitive data, potentially leading to compliance issues if critical operations are interrupted.

Mitigation Strategies

Update Intel PROSet/Wireless WiFi Software for Windows to the latest patched version provided by Intel to address the out-of-bounds read vulnerability in Ring 0.

Hi! I’m here to help you understand CVE-2026-20778. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70